In the first quarter of 2010, according to reports from industry security leaders Secunia, Symantec, and Mc Afee, third-party applications were responsible for the largest increase in security vulnerabilities—even overtaking OS flaws.

For example, third-party update mechanisms might not be enforceable, or they might not be able to be centrally managed.

In addition, they often require users to have elevated privileges.

Considering that several update mechanisms can be running on each device, the landscape soon becomes muddled.

Active Directory (AD) includes Group Policy Software Installation (GPSI), which gives administrators a rudimentary means of updating or deploying software to clients by using Windows Installer (.msi) files.

But GPSI wasn’t designed to scale for large networks, nor has Microsoft invested in the technology since the introduction of AD 10 years ago.

Starting with version 3.0, WSUS includes local publishing APIs that, for the first time, let developers write code to publish custom updates to WSUS.But there’s no free tool from Microsoft for leveraging these new APIs, although local publishing methods can be accessed from Visual Basic scripts or from other programming languages. Open a command-prompt window, and run the gpupdate /force command to make sure that the new settings are applied to the server immediately. After the import finishes, click OK in the notification box.(See “System Center Updates Publisher and Windows Server Update Services Partner Catalogs” for more information about local publishing tools.) Despite this, using WSUS to deploy third-party software and updates has many advantages over GPSI, including the following: The following procedures demonstrate how easy it is to publish third-party updates to WSUS. In the center pane, double-click Configure Automatic Updates. In the Configure Automatic Updates window, select Enabled, then click OK. In the center pane, double-click then click Enabled. Under Options, type followed by the name of the WSUS local server in both boxes. (Note: In this example, the WSUS server is named WINMEM1 and all services are located on one server. Local Update Publisher is an open-source tool that you can download for free from Source Forge. Select the certificate file that you saved to your desktop and click Next. On the Certificate Store page, leave the default selection and click Next. The certificate will display in the MMC window’s center pane. To create a local update, you should work with a Windows Installer file whenever necessary because the Local Update Publisher tool automatically creates rules for applying updates through WSUS.All the operations in these examples, including WSUS client updates, are performed on a Windows Server 2008 R2-based computer that’s a domain member in a test environment. In the navigation pane, expand Computer, right-click All Computers, and click Add Computer Group. In the Add Computer Group dialog box, name the new group Local Updates, then click OK. In the MMC navigation pane, expand Local Computer Policy, Computer Configuration, Administrative Templates, Windows Components. Therefore, I entered both for click Enable, and click OK. The only prerequisite for the Local Update Publisher program is the . Repeat steps 7 through 13 to import the same certificate in the Trusted Publishers container. If you must use an file, and if you can’t extract a Windows Installer package from it, you’ll have to familiarize yourself with System Center Update Publisher Basic Rules.Before you follow these procedures, use the Server Manager wizard to install and configure WSUS to the default settings. In a production environment, the following settings would be configured in a Group Policy Object (GPO) and linked to an organizational unit (OU) that contains computers that we want to update by using WSUS. NET Framework 3.5, which you can install by using Server Manager on Server 2008 R2. You can find more information about these rules here. Then select the Flash Player file that you previously downloaded. (Note: Because we provided the Local Update Publisher tool with a file to create the update, rules are automatically populated over the next few pages of the installation wizard. On the Package Level – Installed Rules page, which Figure 3 shows, click Next to accept the default rules. Repeat step 6 on the following pages: Package Level – Installable Rules, Installation Item Level – Superseded Rules, and Installation Item Level – Rule Metadata. Review the XML information for the update, then click Finish.To be able to separate which computers will receive your custom updates in the test environment, you need to create a computer group. Log on to Server 2008 R2 as a domain administrator. Open the Microsoft Management Console (MMC) Windows Server Update Services snap-in from Administrative Tools on the Start menu. In the console’s navigation pane, expand your WSUS server and click Options. In the Options pane, scroll down the list of configuration options and click Computers. To simplify this demo, we’ll set the local machine policy to configure Windows Update on the local computer only. Click Start, type MMC in the Start Search box, and press Enter. In the new console window, press Ctrl+M to add a new snap-in. You can do this quickly by opening a Power Shell window and running the following commands: After the . To install the latest version of Flash Player via WSUS, first download the Flash Player Windows Installer file. (Note: All the installation files are packaged inside the Flash Player MSI installer.) 3. (Note: The next page, which Figure 2 shows, already includes all the required information except Vendor and Product.) 4. In the Product box, type Flash Player 10.1.85.3 or the appropriate program version. After a few seconds, you should be notified that the update has been successfully published to WSUS.

Tags: Adult Dating, affair dating, sex dating